don't treat "encrypt" setting as an encryption passphrase
docs: formatting fixes, updated reserved encryption options